Shostack + Friends Blog

The FDA has released their new guidance, which will be broadly impactful. (26 Sep 2023)

We can learn a lot from comparing retrospectives (19 Sep 2023)

Seats are available in our October training (14 Sep 2023)

Lots of interesting work in LLMs (again) (30 Aug 2023)

Thoughts on an article on near misses (22 Aug 2023)

Why it’s ok to use the Defcon wifi (02 Aug 2023)

The SEC has important new cybersecurity rules (01 Aug 2023)

Threat modeling really CAN save you money, just ask Chuck! (27 Jul 2023)

Our feedback to CISA is now public (19 Jul 2023)

(17 Jul 2023)

My latest at Dark Reading draws attention to how Microsoft can fix ransomware tomorrow. (05 Jul 2023)

Art imitating life in ways you didn’t think possible (30 Jun 2023)

Books that I read in the second quater that are worth your time include two memoirs, a great book on the security of ML, and more! (28 Jun 2023)

(16 Jun 2023)

Adam's AppSecPNW 2023 keynote (12 Jun 2023)